[squid-users] Whitelist domain ignored?

Alex Rousskov rousskov at measurement-factory.com
Wed Oct 5 00:24:19 UTC 2016


On 10/04/2016 05:16 PM, Jok Thuau wrote:
> On Tue, Oct 4, 2016 at 1:41 PM, Jose Torres-Berrocal wrote:

>>     I have some clients that use a program that tries to connect to:
>>     https://neodecksoftware.com/NeoMedOnline/NeoMedOnlineService.svc


>>     /var/squid/acl/whitelist.acl:

>>     .assertus.com
>>     .neodecksoftware.com


> your whitelist for this domain says that it has "something" followed by
> that domain name...

Good catch! Actually, the problem is even worse. The dstdom_regex will
match even notneodecksoftwarexcom.org IIRC.


>>     acl whitelist dstdom_regex -i "/var/squid/acl/whitelist.acl"

Perhaps the configuration author meant to say dstdomain instead of
dstdom_regex? Are there any intentional regular expressions in
/var/squid/acl/whitelist.acl?

Alex.



More information about the squid-users mailing list